Containers

Containers

Every Suite package ships as a multi-arch container image (linux/amd64 + linux/arm64) on GitHub Container Registry. Pull anonymously, no auth needed.

Images

Image	Source Dockerfile	Default port
ghcr.io/benzsevern/goldensuite-mcp	packages/python/goldensuite-mcp/Dockerfile.mcp	8300
ghcr.io/benzsevern/goldenmatch-mcp	packages/python/goldenmatch/Dockerfile.mcp	8200
ghcr.io/benzsevern/goldencheck-mcp	packages/python/goldencheck/Dockerfile.mcp	8100
ghcr.io/benzsevern/goldenflow-mcp	packages/python/goldenflow/Dockerfile.mcp	8150
ghcr.io/benzsevern/goldenpipe-mcp	packages/python/goldenpipe/Dockerfile.mcp	8250
ghcr.io/benzsevern/infermap-mcp	packages/python/infermap/Dockerfile.mcp	8400
ghcr.io/benzsevern/goldenmatch-extensions	packages/rust/extensions/Dockerfile	5432 (Postgres)

Tags

• :latest — current main
• :main-<sha7> — every push to main, immutable per commit
• :vX.Y.Z and :vX.Y — pushed when a <package>-vX.Y.Z git tag is created

One-line run

# One container, every Suite tool
docker run -p 8300:8300 ghcr.io/benzsevern/goldensuite-mcp:latest

# Per-package containers — narrower deployments
docker run -p 8200:8200 ghcr.io/benzsevern/goldenmatch-mcp:latest

# Postgres + extension preinstalled
docker run -e POSTGRES_PASSWORD=secret -p 5432:5432 \
    ghcr.io/benzsevern/goldenmatch-extensions:latest

Build / push pipeline

.github/workflows/publish-containers.yml. Triggers:

• Push to main → all 7 images get :latest + :main-<sha7>
• Tag <image>-v<X.Y.Z> → only that image, with :vX.Y.Z + :vX.Y + :latest

Auth uses the workflow's built-in GITHUB_TOKEN (no PAT required for ghcr). Build cache is the GH Actions cache backend, scoped per image.

Visibility

All seven packages are public on ghcr — pulls work without authentication. The user-level "Inherit access from source repository" default ensures any new packages from CI inherit the source repo's visibility.